9 September 2017: More Xen Security Advisories, more problems

This is a past/expired downtime notification. The downtimes specified below have been completed, and remarks/results are given below as well.

Unless otherwise noted, all dates and times are given in Coordinated Universal Time (UTC), with time in 24-hour notation.

Edit: The downtime was completed on schedule at 05:34 UTC, and everything appears to now be back to normal.  I’ll update this blog post with more details about the patches when the XSAs go public.

Update 2: It looks like the XSAs patched in this round of reboots were XSAs 231 through 234 (you can find the full list here), with analysis by the QubesOS team.

I swear we did this last month.  Oh, right, that’s because we did.

The Xen development team has released several critical and so far undisclosed Xen Security Advisories (XSAs), and as such, Linode (LizardNet’s provider) will be performing emergency maintenance on all of their Xen hosts. LizardNet’s sole Xen system, phazon.fastlizard4.org, will be rebooted as part of the endeavour to patch the Xen vulnerabilities before the public disclosure time of 12 September 2017. (More information can be found on the Linode status blog here.)

This blog post will be updated upon downtime completion, and when the relevant XSAs are made public.

The following server and services will experience downtime:

phazon.fastlizard4.org
Date and time of downtime start: 05:00 Saturday 9 September 2017 UTC (convert to other timezones)
Duration of downtime: Expected between 30 minutes and 1 hour, but up to 2 hours is possible
Status: Completed on schedule with no issues!
Partial list of services affected:

  • LizardWiki
  • LizardNet OTRS (emails sent to OTRS during the downtime will be delivered after the downtime concludes)
  • LizardNet Continuous Integration (Jenkins) (Gerrit will not be able to trigger any jobs during the downtime, and they will not be run after the downtime concludes)
  • LizardNet Minecraft dynamic web maps
  • LizardIRC server emerald.lizardirc.org
  • LizardIRC’s website
  • LizardMail services on phazon.fastlizard4.org (emails sent to phazon.fastlizard4.org users during the downtime will be delivered after the downtime concludes)
Advertisements
9 September 2017: More Xen Security Advisories, more problems